lmperva and IBM Guardium operate hundreds of intrusive kernel/root-level agents on your critical business infrastructure, creating huge operational risk. The complexities of database agents deployment slow down Cloud transformation and the adoption of AI.
SecuPi delivers modern, agentless and appliance-free DAM with superior compliance coverage, reducing operational risk.
The deployment of SecuPi at leading banks like KeyBank and the Swiss banks was operational in weeks and enabled secure gradual decommissioning. No disruption. No downtime.
Real-time Data Activity Monitoring and UEBA
Ability to monitor in real-time all privileged access to sensitive data
xxAbility to classify and assign risk to sensitive user activity
xxAbility to analyze user activity over time, with self and peer-comparison based on activity risk
xxBlock in real-time suspicious access to sensitive data based on User Behavior Analysis, taking into consideration self and peer comparison over time
xxAbility to monitor in real-time application users access to sensitive data despite the application use of a single service account (connection pool) to connect to the database
Learn More >>
xUsing SecuPi application instrumentation plugin as well as on all access from Denodo/API Gateway/Starburst.
Learn More >>
xNot supported (Database agents see only anonymous service account). They are blind to all applications pulling sensitive data from production databases
Ability to add SSO/MFA to direct DB tools (such as DBeaver)
xxIntegration with Collibra, Alation, Purview, BigID, Informatica data catalogs
xxDynamic Data Masking (Coarse Grained data protection)
Dynamic Masking for thousands of sensitive columns to ensure access is done based on GDPR requirements when accessed by non-European users
xxAttribute-Based Access Control (fine-grained Access Control)
Ability to define data-attributes, user-attributes and context-attributes based policies to restrict access to sensitive data (row, column and cell level) and integrate/import them from all sources.
Learn More >>
xSecuPi can integrate and import from sources such as:
– Data attributes or data tags on tables, columns (including tag inheritance) and rows
– User attributes such as location, citizenship, role, hierarchy, organization/business unit – e.g., integration with Azure AD, Okta via SAML Assertion, Workday employee hierarchy
– Business attributes such as product type, customer category, asset class
xDeployment Overhead
Can the solution be deployed without degrading kernel-level agents deployed on every databases
xx